Re: Study of pf macro expansion, was More problems with pf

[Toni Mueller <openbsd-misc@oeko.net>]

Hi,

On Sun, Mar 24, 2002 at 12:17:41PM +0100, James Wilde wrote:
> The following macro expansion I have not been able to make work at all:
> 
> noise  = "{ 137, 138, 139 }"
> block in     quick on $int_if inet proto udp from $inside to any port =
> $noise

FWIW, I have similar rules which work w/o problems. But I don't have
the '=' on the port clause. Example, from one of my boxen:

pass in proto { tcp, udp } from { $CUST } to any port { 3128, 3130 }

> The most interesting thing I've learnt in this is that, if one specifies a
> source one must also specify a destination.  I hope my investigations can be

Please note that a source or destination can also be "any".


Rgds,
--Toni++